@cleocode/cleo 2026.4.125 → 2026.4.126

package/dist/cli/index.js

@@ -744,13 +744,6 @@ var init_operations = __esm({
   }
 });
 
-// packages/contracts/src/orchestration-hierarchy.ts
-var init_orchestration_hierarchy = __esm({
-  "packages/contracts/src/orchestration-hierarchy.ts"() {
-    "use strict";
-  }
-});
-
 // packages/contracts/src/peer.ts
 var init_peer = __esm({
   "packages/contracts/src/peer.ts"() {
@@ -867,7 +860,6 @@ var init_src = __esm({
     init_lafs();
     init_operations();
     init_params();
-    init_orchestration_hierarchy();
     init_peer();
     init_session2();
     init_status_registry();
@@ -4644,6 +4636,25 @@ var init_registry = __esm({
         requiredParams: [],
         params: []
       },
+      // T1262 — memory-doctor read-only noise detector (E1-parallel per council verdict)
+      {
+        gateway: "query",
+        domain: "memory",
+        operation: "doctor",
+        description: "memory.doctor (query) \u2014 read-only brain noise scan: detects duplicate-content, missing-type, missing-provenance, orphan-edge, low-confidence, stale-unverified patterns. Used as M7 assert-clean gate for Sentient v1 activation.",
+        tier: 0,
+        idempotent: true,
+        sessionRequired: false,
+        requiredParams: [],
+        params: [
+          {
+            name: "assert-clean",
+            type: "boolean",
+            required: false,
+            description: "If true, exit non-zero when any noise patterns are detected (M7 gate for Sentient v1)."
+          }
+        ]
+      },
       // T791 — LLM extraction backend status
       {
         gateway: "query",
@@ -4840,12 +4851,13 @@ var init_registry = __esm({
           { name: "agent", type: "string", required: false, description: "Agent provenance" }
         ]
       },
-      // T792 — promote entry to verified=true (owner/cleo-prime only)
+      // T792 — promote entry to verified=true (project-orchestrator or owner only)
+      // T1258 E1 migration shim: 'cleo-prime' accepted as legacy alias for 'project-orchestrator'
       {
         gateway: "mutate",
         domain: "memory",
         operation: "verify",
-        description: "memory.verify (mutate) \u2014 flip verified=1 on a brain entry; requires cleo-prime or owner identity",
+        description: "memory.verify (mutate) \u2014 flip verified=1 on a brain entry; requires project-orchestrator or owner identity",
         tier: 1,
         idempotent: true,
         sessionRequired: false,
@@ -4856,7 +4868,7 @@ var init_registry = __esm({
             name: "agent",
             type: "string",
             required: false,
-            description: "Caller identity ('cleo-prime' or 'owner'). Omit for terminal invocation."
+            description: "Caller identity ('project-orchestrator' or 'owner'). Legacy alias 'cleo-prime' accepted per T1258 E1 migration shim. Omit for terminal invocation."
           }
         ]
       },
@@ -18430,6 +18442,23 @@ var init_memory2 = __esm({
                 startTime
               );
             }
+            // T1262 — brain noise detector (read-only, E1-parallel per council verdict)
+            case "doctor": {
+              const { scanBrainNoise } = await import("@cleocode/core/memory/brain-doctor.js");
+              const result = await scanBrainNoise(projectRoot);
+              const assertClean = params?.["assert-clean"];
+              if (assertClean && !result.isClean) {
+                return errorResult(
+                  "query",
+                  "memory",
+                  operation,
+                  "E_BRAIN_NOISE_DETECTED",
+                  `Brain noise detected: ${result.findings.length} pattern(s) across ${result.totalScanned} entries. ` + result.findings.map((f) => `${f.pattern}(${f.count})`).join(", ") + ". Run `cleo memory doctor` for details. Fix noise before enabling Sentient v1 (M7 gate).",
+                  startTime
+                );
+              }
+              return wrapResult(result, "query", "memory", operation, startTime);
+            }
             // T791 — LLM extraction backend status
             case "llm-status": {
               const resolvedSource = resolveAnthropicApiKeySource();
@@ -19264,14 +19293,20 @@ var init_memory2 = __esm({
                   startTime
                 );
               }
+              const VERIFY_PERMITTED_IDENTITIES = /* @__PURE__ */ new Set([
+                "owner",
+                "project-orchestrator",
+                "cleo-prime"
+                // legacy alias — see migration shim note above
+              ]);
               const callerAgent = params?.agent;
-              if (callerAgent && callerAgent !== "cleo-prime" && callerAgent !== "owner") {
+              if (callerAgent && !VERIFY_PERMITTED_IDENTITIES.has(callerAgent)) {
                 return errorResult(
                   "mutate",
                   "memory",
                   operation,
                   "E_FORBIDDEN",
-                  `verify requires agent identity 'cleo-prime' or 'owner'; got '${callerAgent}'`,
+                  `verify requires agent identity 'project-orchestrator' or 'owner'; got '${callerAgent}'`,
                   startTime
                 );
               }
@@ -19522,6 +19557,8 @@ var init_memory2 = __esm({
             "code.links",
             "code.memories-for-code",
             "code.for-memory",
+            // T1262 — brain noise detector (E1-parallel, read-only)
+            "doctor",
             // T791 — LLM extraction backend status
             "llm-status",
             // T792 — pending verification queue
@@ -45267,6 +45304,31 @@ var importCommand3 = defineCommand({
     if (stats.errors > 0) process.exit(1);
   }
 });
+var doctorCommand3 = defineCommand({
+  meta: {
+    name: "doctor",
+    description: "Read-only brain noise scan: detects duplicate-content, missing-type, missing-provenance, orphan-edge, low-confidence, and stale-unverified patterns. Use --assert-clean as the M7 entry gate before enabling Sentient v1 (`cleo sentient propose enable`)."
+  },
+  args: {
+    "assert-clean": {
+      type: "boolean",
+      description: "Exit non-zero when any noise patterns are detected (M7 gate for Sentient v1)"
+    },
+    json: {
+      type: "boolean",
+      description: "Output as JSON"
+    }
+  },
+  async run({ args }) {
+    await dispatchFromCli(
+      "query",
+      "memory",
+      "doctor",
+      { "assert-clean": args["assert-clean"] },
+      { command: "memory-doctor", operation: "memory.doctor" }
+    );
+  }
+});
 var llmStatusCommand = defineCommand({
   meta: {
     name: "llm-status",
@@ -46125,6 +46187,7 @@ var memoryCommand = defineCommand({
     reflect: reflectCommand,
     "dedup-scan": dedupScanCommand,
     import: importCommand3,
+    doctor: doctorCommand3,
     "llm-status": llmStatusCommand,
     verify: verifyCommand,
     "pending-verify": pendingVerifyCommand,